Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Gd-iN11bQrCDVMZyLn3flI29Z-I.roa
File: Gd-iN11bQrCDVMZyLn3flI29Z-I.roa (raw, json)
Hash identifier: t14RojXrlCdHi04b/xQXn8u3f1MdTr6rOrH++OcGVRc=
Subject key identifier: 19:DF:A2:37:5D:5B:42:B0:83:54:C6:72:2E:7D:DF:94:8D:BD:67:E2
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019711033F53245D1639717FF8A167066C68
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Gd-iN11bQrCDVMZyLn3flI29Z-I.roa
Signing time: Tue 27 May 2025 09:11:54 +0000
ROA not before: Tue 27 May 2025 09:11:54 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 3257
IP address blocks: 46.33.64.0/19 maxlen: 24
62.41.0.0/20 maxlen: 24
62.41.16.0/21 maxlen: 24
62.41.24.0/22 maxlen: 24
62.41.32.0/24 maxlen: 24
62.41.37.0/24 maxlen: 24
62.41.56.0/21 maxlen: 24
62.41.64.0/20 maxlen: 24
62.41.80.0/22 maxlen: 24
62.41.84.0/23 maxlen: 24
62.41.102.0/24 maxlen: 24
62.41.160.0/24 maxlen: 24
62.50.128.0/19 maxlen: 19
62.132.0.0/22 maxlen: 22
62.132.16.0/22 maxlen: 22
62.132.24.0/23 maxlen: 23
62.132.28.0/24 maxlen: 24
62.132.42.0/23 maxlen: 23
62.132.114.0/23 maxlen: 23
62.132.116.0/23 maxlen: 23
62.132.132.0/23 maxlen: 23
77.67.0.0/17 maxlen: 24
77.77.128.0/18 maxlen: 24
87.119.64.0/18 maxlen: 24
89.149.128.0/18 maxlen: 24
92.71.0.0/17 maxlen: 17
92.71.128.0/18 maxlen: 18
134.222.0.0/16 maxlen: 16
135.196.12.0/23 maxlen: 24
135.196.228.0/23 maxlen: 24
135.196.232.0/23 maxlen: 24
135.196.238.0/23 maxlen: 24
141.136.96.0/20 maxlen: 20
185.160.40.0/22 maxlen: 22
192.16.202.0/24 maxlen: 24
192.54.104.0/24 maxlen: 24
192.67.190.0/23 maxlen: 23
192.67.192.0/22 maxlen: 22
192.67.196.0/24 maxlen: 24
192.129.32.0/23 maxlen: 23
192.129.36.0/24 maxlen: 24
192.129.43.0/24 maxlen: 24
192.129.44.0/24 maxlen: 24
192.129.46.0/23 maxlen: 23
192.129.48.0/23 maxlen: 23
192.129.54.0/24 maxlen: 24
192.129.56.0/23 maxlen: 24
193.141.0.0/23 maxlen: 23
193.141.2.0/24 maxlen: 24
193.141.40.0/22 maxlen: 22
193.141.44.0/23 maxlen: 23
193.141.140.0/23 maxlen: 23
193.242.80.0/20 maxlen: 20
194.41.62.0/24 maxlen: 24
194.45.4.0/23 maxlen: 23
194.45.12.0/23 maxlen: 23
194.45.47.0/24 maxlen: 24
194.45.98.0/23 maxlen: 23
194.45.182.0/23 maxlen: 23
194.120.0.0/24 maxlen: 24
194.120.43.0/24 maxlen: 24
194.120.112.0/22 maxlen: 22
194.120.120.0/22 maxlen: 22
194.121.52.0/22 maxlen: 22
194.121.104.0/23 maxlen: 23
194.121.123.0/24 maxlen: 24
194.121.203.0/24 maxlen: 24
194.121.220.0/22 maxlen: 22
194.122.76.0/22 maxlen: 22
194.122.80.0/21 maxlen: 21
194.122.120.0/21 maxlen: 21
194.122.224.0/20 maxlen: 20
194.122.248.0/22 maxlen: 22
194.123.122.0/24 maxlen: 24
194.123.164.0/24 maxlen: 24
195.143.0.0/16 maxlen: 24
212.0.224.0/19 maxlen: 19
212.1.0.0/19 maxlen: 19
212.14.64.0/19 maxlen: 19
212.27.160.0/19 maxlen: 19
212.56.0.0/19 maxlen: 19
212.81.64.0/18 maxlen: 18
212.115.128.0/18 maxlen: 24
212.189.0.0/17 maxlen: 17
212.221.0.0/17 maxlen: 24
212.222.0.0/16 maxlen: 24
213.200.64.0/18 maxlen: 18
213.251.0.0/18 maxlen: 24
213.254.192.0/18 maxlen: 24
217.114.112.0/20 maxlen: 20
217.117.160.0/20 maxlen: 20
217.118.112.0/20 maxlen: 20
217.195.224.0/19 maxlen: 19
2001:668::/29 maxlen: 64
2001:680::/32 maxlen: 32
2001:680:12::/48 maxlen: 48
2001:680:16::/48 maxlen: 48
2001:680:19::/48 maxlen: 48
2001:680:20::/48 maxlen: 48
2a00:1750::/32 maxlen: 32
Validation: Failed, certificate revoked on Fri 06 Jun 2025 08:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:11:03:3f:53:24:5d:16:39:71:7f:f8:a1:67:06:6c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: May 27 09:11:54 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=19dfa2375d5b42b08354c6722e7ddf948dbd67e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:b9:7d:91:c1:3d:2e:20:23:b3:47:1d:ce:09:
3f:e4:bb:f7:85:91:1e:f4:10:34:d9:ab:5a:21:51:
7a:ac:3b:e2:5a:82:24:11:c6:ba:f9:a2:82:95:f8:
74:6d:1c:30:3e:48:74:5d:92:85:3a:2a:4c:3b:81:
78:30:67:b6:f3:28:74:51:0b:d7:1b:a1:91:5d:52:
5a:67:7f:4d:24:5c:5b:62:49:fe:6a:ac:11:0c:e1:
cd:14:02:d2:a8:78:af:1e:25:4f:65:3e:4f:da:b8:
3d:06:0e:2c:cf:b5:d1:a7:c0:f2:0a:fd:94:ad:db:
68:fd:4c:97:93:d1:cc:5f:30:a1:19:9a:9c:f9:6a:
6d:42:7a:5d:a2:c9:62:c7:4d:f8:08:94:23:21:f3:
b5:47:2c:1b:f4:94:1a:25:62:6d:f8:b3:e8:d2:a9:
7d:e2:5c:04:80:c6:65:db:fa:a6:c3:c7:bc:18:fd:
7e:27:7c:c3:29:18:d8:00:19:d0:c8:d7:cb:95:08:
72:91:34:41:83:3a:1f:68:6d:d9:d1:a0:09:ac:38:
56:87:77:bc:7d:33:50:70:60:29:da:b4:aa:b9:a1:
95:c5:9e:04:74:81:7f:6b:37:e6:11:53:2e:77:3b:
55:c2:5e:b0:df:87:98:09:1b:24:af:4c:ce:85:67:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:DF:A2:37:5D:5B:42:B0:83:54:C6:72:2E:7D:DF:94:8D:BD:67:E2
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/Gd-iN11bQrCDVMZyLn3flI29Z-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.33.64.0/19
62.41.0.0-62.41.27.255
62.41.32.0/24
62.41.37.0/24
62.41.56.0-62.41.85.255
62.41.102.0/24
62.41.160.0/24
62.50.128.0/19
62.132.0.0/22
62.132.16.0/22
62.132.24.0/23
62.132.28.0/24
62.132.42.0/23
62.132.114.0-62.132.117.255
62.132.132.0/23
77.67.0.0/17
77.77.128.0/18
87.119.64.0/18
89.149.128.0/18
92.71.0.0-92.71.191.255
134.222.0.0/16
135.196.12.0/23
135.196.228.0/23
135.196.232.0/23
135.196.238.0/23
141.136.96.0/20
185.160.40.0/22
192.16.202.0/24
192.54.104.0/24
192.67.190.0-192.67.196.255
192.129.32.0/23
192.129.36.0/24
192.129.43.0-192.129.44.255
192.129.46.0-192.129.49.255
192.129.54.0/24
192.129.56.0/23
193.141.0.0-193.141.2.255
193.141.40.0-193.141.45.255
193.141.140.0/23
193.242.80.0/20
194.41.62.0/24
194.45.4.0/23
194.45.12.0/23
194.45.47.0/24
194.45.98.0/23
194.45.182.0/23
194.120.0.0/24
194.120.43.0/24
194.120.112.0/22
194.120.120.0/22
194.121.52.0/22
194.121.104.0/23
194.121.123.0/24
194.121.203.0/24
194.121.220.0/22
194.122.76.0-194.122.87.255
194.122.120.0/21
194.122.224.0/20
194.122.248.0/22
194.123.122.0/24
194.123.164.0/24
195.143.0.0/16
212.0.224.0-212.1.31.255
212.14.64.0/19
212.27.160.0/19
212.56.0.0/19
212.81.64.0/18
212.115.128.0/18
212.189.0.0/17
212.221.0.0/17
212.222.0.0/16
213.200.64.0/18
213.251.0.0/18
213.254.192.0/18
217.114.112.0/20
217.117.160.0/20
217.118.112.0/20
217.195.224.0/19
IPv6:
2001:668::/29
2001:680::/32
2a00:1750::/32
Signature Algorithm: sha256WithRSAEncryption
48:1d:7b:91:30:6e:ed:11:d4:a1:9a:f6:b9:10:2b:23:de:4b:
de:28:c2:e3:8f:63:06:fb:fc:6a:72:64:8f:1e:45:53:31:4b:
63:c4:5c:4a:4f:e5:59:dc:a9:51:30:68:99:14:9e:2c:8a:17:
54:01:08:cc:16:5f:a8:62:c2:4f:fc:bd:b5:9d:15:b7:e3:8a:
9f:ea:16:10:27:b0:f9:65:25:81:1e:70:d0:91:7d:9b:00:34:
ee:f6:73:47:b1:68:82:31:cb:d4:ab:19:8e:73:dd:9e:d3:d9:
9b:6b:d6:78:f5:cd:da:ef:61:b5:a6:68:c7:b8:c9:e1:0d:6b:
f2:f0:ee:02:a2:cd:c3:54:e2:4a:bd:11:fd:a7:78:c4:6b:a0:
87:10:e4:06:07:b6:fe:c3:e1:18:9d:04:cf:f8:d6:d7:47:69:
d0:1d:d9:e6:1e:be:cb:cb:01:54:9b:df:17:6f:94:13:bb:e2:
47:92:70:a0:09:8c:2d:ee:a9:b5:24:10:6d:84:3a:1e:c7:de:
ae:86:52:fb:ba:d2:bb:b4:e5:9b:b2:ab:04:6e:3e:38:4a:8b:
00:1d:6f:65:25:18:65:de:48:0d:ec:08:88:7d:a2:5d:3c:49:
87:f1:46:46:64:a7:ad:14:18:90:7e:97:a1:4e:c6:e4:1f:a1:
f7:22:ab:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 6 13:21:05 2025 by rpki-client